How to remove KMSELDI.exe
- File Details
- Overview
- Analysis
KMSELDI.exe
The module KMSELDI.exe has been detected as Crack.AutoKMS
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
06810ebac68abae1ea11b3f399f87dc1 |
| Size: |
1 MB |
| First Published: |
2017-06-10 14:04:58 (7 years ago) |
| Latest Published: |
2020-04-08 23:08:53 (4 years ago) |
| Status: |
Crack.AutoKMS (on last analysis) |
|
| Analysis Date: |
2020-04-08 23:08:53 (4 years ago) |
Overview
| %programfiles%\kmspico |
| %desktop%\программы\активация\kmspico_10.0.7_beta\kmspicoportable.rar |
| %desktop%\kmspicoportable |
| %programfiles% |
| %sysdrive%\activators\kmspico_10.0.7_beta |
| %sysdrive%\d\cha_win_7_sp1_professional_zh_tw\kmspico.v10.0.7 |
| %desktop%\várias pastas\kmspico 10.0.7 beta + portable [activador de windows @amp; office] [zs] |
| %sysdrive%\$recycle.bin\s-1-5-21-3024158017-454659238-1331604641-1001\$rig4fq2 |
| %sysdrive%\0000\software |
| %sysdrive%\software\activator windows + office\activate\kmspico_10.0.7-sb |
|
30.4% |
|
|
19.6% |
|
|
7.1% |
|
|
5.4% |
|
|
3.6% |
|
|
3.6% |
|
|
3.6% |
|
|
3.6% |
|
|
3.6% |
|
|
3.6% |
|
|
1.8% |
|
|
1.8% |
|
|
1.8% |
|
|
1.8% |
|
|
1.8% |
|
|
1.8% |
|
|
1.8% |
|
|
1.8% |
|
|
1.8% |
|
| Windows 10 |
78.9% |
|
| Windows 7 |
12.3% |
|
| Windows 8.1 |
7.0% |
|
| Windows 8 |
1.8% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x001160be |
| MVID: |
173fd84a-3b4f-4707-a659-8ad8cf4f5123 |
| Name |
Size of data |
MD5 |
| .text |
1131008 |
b8e68516bf5e05146439b5bca0ba65f4 |
| .rsrc |
20992 |
6f17a55a0fd8e687943dfa2eb7765234 |
| .reloc |
512 |
c74a38b0a864b930c0abd7637125364d |
